Skip to content
OpenAdvisories
High · 8.8 CVE-2026-102174 EUVD-2026-101389GHSA-fmx5-gpxg-52jp

Junos OS: SRX Series: An authenticated remote-access VPN client causes iked denial of service or root-level code execution when JIMS identity publishing is enabled

Published Oct 14, 2026 · Updated Oct 16, 2026 · Assigned by juniper

Vendor: Juniper Networks Product: Junos OS Category: Network devices

Description

A Stack-based Buffer Overflow vulnerability in the iked IKE key-management daemon of Juniper Networks Junos OS on the SRX Series allows an authenticated remote-access VPN client to execute code with root privileges or cause denial of service via the remote-access VPN authentication and JIMS identity-publishing path.

Affected products

VendorProductAffectedFixed
Juniper Networks Junos OS < 23.2R2-S7.7, 23.4 – < 23.4R2-S8.13, 24.2 – < 24.2R2-S5.5, 24.4 – < 24.4R2-S5, 25.2 – < 25.2R2-S2, 25.4 – < 25.4R1-S3, 26.2 – < 26.2R1-S2 23.2R2-S7.7

References